Dear Student,
in order to attend in one of our practical courses in the upcoming winter term 2025/26, you have to solve a small qualification challenge and register yourself on this site. Our practical courses for the upcoming term are:
in order to attend in one of our practical courses in the upcoming winter term 2025/26, you have to solve a small qualification challenge and register yourself on this site. Our practical courses for the upcoming term are:
Binary Exploitation
Interested in exploiting buggy C and C++ programs on modern x86_64 Linux systems? Then this course is for you! Go to course registrationWeb Application Security
In this course, we will focus on teaching classical and new security vulnerabilities in web applications: for example injection vulnerabilities, XSS, CSRF, and many more. At the end of this class you will test your knowledge by analyzing the codebase of various frequently-used TUM tools, like TUMLive, NavigaTUM, as well as other open source projects. For more details, see https://www.sec.in.tum.de/i20/teaching/ws2026/web-application-security.No FCFS until 11.07.2026 14:00; FCFS afterwards.
Update 09.07. 12:30: There was an unintended solution in the qualification challenge, making it way easier than intended. That bug has been fixed now: the only difference is re.match vs. re.fullmatch in app.py, line 14.
Existing qualifications have been reset. Please solve the challenge again. The FCFS deadline has been extended accordingly. People who solved the old challenge have been notified via mail.
Update 09.07. 13:30: There was another problem in the challenge, which has been fixed now. Please redownload the challenge again. Go to course registration